Application Security - Key Vault
0 likes160 views
Azure Key Vault helps solve problems with secrets management, key management, and certificate management. It manages X509 certificates, supports RSA and elliptic curve keys, and allows storage of name-value pair secrets. Keys and secrets can be rotated without affecting applications by manual, programmatic, or automated processes.
Application Security - Key Vault
- 2. Hello! I am Eng Teong Cheah Microsoft MVP 2
- 3. Key Vault 3
- 4. Azure Key Vault 4 Azure Key Vault helps solve the following problems: ◎ Secrets Management ◎ Key Management ◎ Certificate Management
- 6. Key Vault Certificates 6 ◎ Manages X509 v3 certificates (PFX, PEM) ◎ Created by the Key Vault or by import ◎ Self-signed and Certificate Authority certificates ◎ Lifecycle management including automatic renewal and contact notification ◎ Minimum 2048-bit encryption ◎ RSA or RSA HSM with certificates
- 7. Key Vault Keys 7 ◎ Soft (Key vault) and Hard (HSM) keys ◎ Supports operations like create, delete, update, and list ◎ Supports cryptographic operations like sign and verify, key encryption/wrapping, and encrypt and decrypt
- 8. Key Vault Keys 8 ◎ Support secure transfer of existing keys in Bring Your Own Key (BYOK) scenarios ◎ Premium supports HSM- protected keys ◎ RSA and Elliptic Curve
- 10. Key Vault Secrets 10 ◎ Name-value pair ◎ Name must be unique in the vault ◎ Value can be any UTF-8 string – max 25 KB in size ◎ Manual or certificate creation
- 11. Key and Secret Rotation 11 Update keys and secrets without affecting your application Rotate keys and secrets in several ways: ◎ As part of a manual process ◎ Programmatically with the REST API ◎ With an Azure Automation script
- 13. Thanks! Any questions? You can find me at: @walkercet 21